apis

SUSPICIOUS: the core skill content is a benign routing/design guide, but it instructs transitive installation of external skills through a repo-local installer whose remote sources are mostly hidden and not publicly verifiable from the provided material. No direct exfiltration or credential harvesting is shown, so this is medium supply-chain/trust risk rather than confirmed malware.